This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json) Hash identifier: G1VyovilTFEJa9a6CExpB+9jL7/hjKzbGfxd+6LeJZw= Subject key identifier: 70:DF:0D:39:59:F7:9F:F1:9D:BD:A3:A7:91:3C:95:8F:9F:BA:5E:E3 Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42 Certificate serial: 019B20CFD88F759BEEF33CE50E2DD74C2F0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft Manifest number: 0FA9 Signing time: Mon 15 Dec 2025 07:00:50 +0000 Manifest this update: Mon 15 Dec 2025 07:00:50 +0000 Manifest next update: Tue 16 Dec 2025 07:00:50 +0000 Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: AKq6TUfIsDl17/HGtFNxgJbb/W6sGI3o3kBw0UWKw54=) 2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:d8:8f:75:9b:ee:f3:3c:e5:0e:2d:d7:4c:2f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42 Validity Not Before: Dec 15 07:00:50 2025 GMT Not After : Dec 16 07:00:50 2025 GMT Subject: CN=70df0d3959f79ff19dbda3a7913c958f9fba5ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:7d:e3:84:1e:6d:87:17:39:49:e8:0c:ab: f2:16:1a:83:41:fc:c7:13:6d:90:0a:50:e6:b1:b2: 8a:4c:5d:2f:48:71:b0:19:fc:4f:10:72:1a:d9:ff: 6d:04:18:6c:1f:e4:8d:51:78:b3:3c:a0:65:8d:5f: 8f:12:18:0e:99:67:52:50:3a:6e:cd:2f:15:03:27: 65:e6:89:41:88:43:72:38:cb:dd:20:07:8f:a5:df: ef:dd:9c:13:e6:dd:3d:46:94:46:42:3f:32:c6:91: dd:b3:61:4e:07:ab:0f:39:7c:fe:b2:b3:16:12:9a: 7b:06:23:72:0e:f5:58:7e:29:a5:ad:2b:06:18:e2: 18:7f:70:67:27:79:ad:1a:54:e5:f8:da:88:f0:bb: 13:24:f6:33:9c:ad:78:c6:d0:05:fa:94:dd:1b:18: 3f:71:d5:0b:e7:cc:98:77:24:94:81:2d:0e:d1:6d: 4e:66:4b:c4:83:35:05:75:a3:9a:ea:a9:b6:57:cb: e5:0e:be:a1:b7:28:4f:12:ac:19:60:83:88:65:c2: 6c:2b:c2:61:bd:5f:98:e7:77:1a:a3:ba:55:ad:2c: 4e:94:c5:50:eb:87:04:64:00:ca:c5:84:9c:3e:2b: d7:72:3f:7f:3a:21:fa:cb:7a:fb:8b:26:30:ab:c7: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DF:0D:39:59:F7:9F:F1:9D:BD:A3:A7:91:3C:95:8F:9F:BA:5E:E3 X509v3 Authority Key Identifier: keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e9:32:95:0d:75:e0:06:c8:5b:0a:8d:64:f1:66:0f:1c:96: e4:1a:99:31:fd:65:5c:b4:cb:57:da:33:fd:5c:23:5e:bd:e5: 41:16:41:73:ed:85:3b:58:23:6f:f4:8f:86:c0:65:5b:34:9e: 44:da:06:ec:a9:34:6a:f2:9e:7a:52:75:b4:17:a6:5f:67:d2: ac:a3:1c:8f:05:ff:c5:62:77:89:30:91:fa:5d:03:9d:2b:dd: eb:9c:de:57:3a:23:07:b2:aa:c9:e0:9b:99:91:7b:1b:41:cc: e9:73:71:99:ac:00:9f:ec:5d:e1:46:d0:99:84:0f:90:a0:3f: c4:4e:92:85:e1:cb:8e:c1:2c:a6:f7:bd:9b:f4:78:4d:3d:ae: 26:ca:05:94:22:8a:0c:e3:5c:0a:61:13:07:1e:62:8d:05:69: 52:a9:e3:8e:ac:2b:b0:46:50:51:17:30:de:91:2e:28:9b:24: 3a:4d:30:b7:88:79:f8:ce:6a:89:57:df:bc:f9:43:98:9a:4e: 17:f9:09:4d:2d:0e:80:af:2d:d6:13:ac:73:97:2d:e9:36:04: ce:de:f4:d8:99:51:45:c5:d8:cf:16:d2:5f:78:7b:c9:cf:eb: b1:47:8c:f3:25:3b:d8:6a:83:00:1c:77:d3:83:35:55:cf:e0: 6a:79:d1:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz9iPdZvu8zzlDi3XTC8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYTRlNTcxMGE0NjUzNmJlZjJhZjM2YmY2M2YxOTQwYmMz N2JkNDIwHhcNMjUxMjE1MDcwMDUwWhcNMjUxMjE2MDcwMDUwWjAzMTEwLwYDVQQD Eyg3MGRmMGQzOTU5Zjc5ZmYxOWRiZGEzYTc5MTNjOTU4ZjlmYmE1ZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7J944QebYcXOUnoDKvyFhqDQfzH E22QClDmsbKKTF0vSHGwGfxPEHIa2f9tBBhsH+SNUXizPKBljV+PEhgOmWdSUDpu zS8VAydl5olBiENyOMvdIAePpd/v3ZwT5t09RpRGQj8yxpHds2FOB6sPOXz+srMW Epp7BiNyDvVYfimlrSsGGOIYf3BnJ3mtGlTl+NqI8LsTJPYznK14xtAF+pTdGxg/ cdUL58yYdySUgS0O0W1OZkvEgzUFdaOa6qm2V8vlDr6htyhPEqwZYIOIZcJsK8Jh vV+Y53cao7pVrSxOlMVQ64cEZADKxYScPivXcj9/OiH6y3r7iyYwq8dbFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDfDTlZ95/xnb2jp5E8lY+ful7jMB8GA1UdIwQY MBaAFFqk5XEKRlNr7yrza/Y/GUC8N71CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xZGQ4MWMtNjY1ZS00Yjc2LTkxZmIt NDRkYzUyYTE5Y2U1LzEvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xZGQ4MWMtNjY1ZS00Yjc2LTkxZmItNDRkYzUyYTE5Y2U1 LzEvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOkylQ11 4AbIWwqNZPFmDxyW5BqZMf1lXLTLV9oz/VwjXr3lQRZBc+2FO1gjb/SPhsBlWzSe RNoG7Kk0avKeelJ1tBemX2fSrKMcjwX/xWJ3iTCR+l0DnSvd65zeVzojB7KqyeCb mZF7G0HM6XNxmawAn+xd4UbQmYQPkKA/xE6SheHLjsEspve9m/R4TT2uJsoFlCKK DONcCmETBx5ijQVpUqnjjqwrsEZQURcw3pEuKJskOk0wt4h5+M5qiVffvPlDmJpO F/kJTS0OgK8t1hOsc5ct6TYEzt702JlRRcXYzxbSX3h7yc/rsUeM8yU72GqDABx3 04M1Vc/gannRnA== -----END CERTIFICATE-----Generated at Mon Dec 15 15:29:15 2025 by rpki-client